fluentdsyslogs

Documentation

Index

• Constants
• type RFC3164
• type RFC3164Parser
  • func (p *RFC3164Parser) LogType() string
  • func (p *RFC3164Parser) New() parsers.LogParser
  • func (p *RFC3164Parser) Parse(log string) ([]*parsers.PantherLog, error)
• type RFC5424
• type RFC5424Parser
  • func (p *RFC5424Parser) LogType() string
  • func (p *RFC5424Parser) New() parsers.LogParser
  • func (p *RFC5424Parser) Parse(log string) ([]*parsers.PantherLog, error)

Constants

const (
	TypeRFC3164 = "Fluentd.Syslog3164"
	TypeRFC5424 = "Fluentd.Syslog5424"
)

Types

type RFC3164

type RFC3164 struct {
	Priority  *uint8                      `` /* 141-byte string literal not displayed */
	Hostname  *string                     `` /* 128-byte string literal not displayed */
	Ident     *string                     `` /* 137-byte string literal not displayed */
	ProcID    *numerics.Integer           `` /* 163-byte string literal not displayed */
	Message   *string                     `` /* 133-byte string literal not displayed */
	Timestamp *timestamp.FluentdTimestamp `json:"time,omitempty" validate:"required" description:"Timestamp of the syslog message in UTC."`
	Tag       *string                     `json:"tag,omitempty" validate:"required" description:"Tag of the syslog message"`
	// NOTE: added to end of struct to allow expansion later
	parsers.PantherLog
}

nolint:lll

type RFC3164Parser

type RFC3164Parser struct{}

RFC3164Parser parses Fluentd syslog logs in the RFC3164 format

func (*RFC3164Parser) LogType

func (p *RFC3164Parser) LogType() string

LogType returns the log type supported by this parser

func (*RFC3164Parser) New

func (p *RFC3164Parser) New() parsers.LogParser

func (*RFC3164Parser) Parse

func (p *RFC3164Parser) Parse(log string) ([]*parsers.PantherLog, error)

Parse returns the parsed events or nil if parsing failed

type RFC5424

type RFC5424 struct {
	Priority  *uint8                      `` /* 151-byte string literal not displayed */
	Hostname  *string                     `` /* 128-byte string literal not displayed */
	Ident     *string                     `` /* 137-byte string literal not displayed */
	ProcID    *numerics.Integer           `` /* 183-byte string literal not displayed */
	MsgID     *string                     `` /* 172-byte string literal not displayed */
	ExtraData *string                     `json:"extradata,omitempty" validate:"required" description:"ExtraData contains syslog strucured data as string"`
	Message   *string                     `` /* 133-byte string literal not displayed */
	Timestamp *timestamp.FluentdTimestamp `json:"time,omitempty" validate:"required" description:"Timestamp of the syslog message in UTC."`
	Tag       *string                     `json:"tag,omitempty" validate:"required" description:"Tag of the syslog message"`
	// NOTE: added to end of struct to allow expansion later
	parsers.PantherLog
}

nolint:lll

type RFC5424Parser

type RFC5424Parser struct{}

RFC5424Parser parses fluentd syslog logs in the RFC5424 format

func (*RFC5424Parser) LogType

func (p *RFC5424Parser) LogType() string

LogType returns the log type supported by this parser

func (*RFC5424Parser) New

func (p *RFC5424Parser) New() parsers.LogParser

func (*RFC5424Parser) Parse

func (p *RFC5424Parser) Parse(log string) ([]*parsers.PantherLog, error)

Parse returns the parsed events or nil if parsing failed